CVE-2025-2268 HP LaserJet MFP M232-M237 Printer Series - Potential Denial of Service
Attackers can cause a denial of service on HP LaserJet MFP M232-M237 printers by sending specially crafted IPP requests.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-2268?
CVE-2025-2268 is a medium-severity denial of service vulnerability in HP LaserJet MFP M232-M237 Printer Series, published on 14 Mar 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The HP LaserJet MFP M232-M237 Printer Series may be vulnerable to a denial of service attack when a specially crafted request message is sent via Internet Printing Protocol (IPP).
Weakness: CWE-241
Which versions are affected by CVE-2025-2268?
It affects 54 products.
Products include Hp 1y7d4a Firmware, Hp 2a129a Firmware, Hp 2a130a Firmware, Hp 2a130e Firmware, Hp 2u589a Firmware, Hp 2u589e Firmware and 48 more.
How do I fix CVE-2025-2268?
No fix has been published for CVE-2025-2268 yet. Limit exposure of the affected software until one is available.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2025-2268 being exploited?
There is no known exploitation of CVE-2025-2268 in the wild and no public exploit code.
Other vulnerabilities in HP LaserJet MFP M232-M237 Printer Series
Sources
Also known as GHSA-gfwp-pr8h-rv7g.